966f40de0c0c6827e8e2dac39da2fe45288f42a6d73002cabc327ac0790f8e70 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

966f40de0c0c6827e8e2dac39da2fe45288f42a6d73002cabc327ac0790f8e70
Size

164KB
MD5

ef8cf89912024e6fd6ff926982260f95
SHA1

27ead98f90d1712231062bbdebc8f87f12fce667
SHA256

966f40de0c0c6827e8e2dac39da2fe45288f42a6d73002cabc327ac0790f8e70
SHA512

3f1608370e803c69df7f9eec71654c308797a9ce078d3d7d962a9229b6240f1fe36dd791512efbf3f8765c333f4205c43b8275378393c87f5faf0a20f034c3f0
SSDEEP

3072:F90JAVFTfa9IQgAuE6cdlpUTmHta5HUofAS2M7gA3u9A:F90+zuwE6qpU6Na5HX2M70

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
966f40de0c0c6827e8e2dac39da2fe45288f42a6d73002cabc327ac0790f8e70

Files

966f40de0c0c6827e8e2dac39da2fe45288f42a6d73002cabc327ac0790f8e70
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 162KB - Virtual size: 161KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ